puppet-prod

Files

T

unkin-agent 6c880d9794 Add consul server federation SANs to consul server certs (#547 )

WAN federation through mesh gateways makes Consul verify server certs against `server.<dc>.consul` and `<node_name>.server.<dc>.consul`. Node names are FQDNs, so each server needs its exact SAN. This adds the SANs ahead of Consul server TLS, which a stacked follow-up enables once the reissued certs are verified.

- add `server.<country>-<region>.consul` to consul server alt_names
- add `<fqdn>.server.<country>-<region>.consul` to consul server alt_names

Reviewed-on: #547
Co-authored-by: unkin-agent <unkin-agent@unkin.net>
Co-committed-by: unkin-agent <unkin-agent@unkin.net>

2026-10-09 21:51:43 +11:00

apps

Migrate media roles to puppet-on-k8s (#540 )

2026-10-05 12:10:31 +11:00

ceph

feat: manage mon loopback0 (#285 )

2025-05-15 19:46:59 +10:00

infra

Add consul server federation SANs to consul server certs (#547 )

2026-10-09 21:51:43 +11:00

apps.yaml

refactor: move puppet::* roles to infra::puppet